CVE-2026-22794
CRITICALAppsmith < 1.93 - Origin Validation Error in Email Link Generation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2026-22794. PoCs published by MalikHamza7, exploitChains, XZ1r0.
AI-analyzed exploit summary This repository contains a functional PoC exploit for CVE-2026-22794, which leverages Origin header injection in Appsmith to hijack password reset tokens and achieve full account takeover. The exploit includes both client-side attack execution and server-side token capture capabilities.
Description
Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the email link baseUrl without validation. If an attacker controls the Origin, password reset / email verification links in emails can be generated pointing to the attacker’s domain, causing authentication tokens to be exposed and potentially leading to account takeover. This vulnerability is fixed in 1.93.
Exploits (3)
This repository contains a functional PoC exploit for CVE-2026-22794, which leverages Origin header injection in Appsmith to hijack password reset tokens and achieve full account takeover. The exploit includes both client-side attack execution and server-side token capture capabilities.
The repository contains only a README with a link to an advisory and no actual exploit code or technical details. It appears to be a placeholder or lure rather than a legitimate PoC.
This repository contains a functional exploit for CVE-2026-22794, demonstrating password reset token hijacking via Origin header manipulation in Appsmith. The exploit includes a Python script to send malicious reset requests and a Nuclei template for vulnerability detection.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H